CVE-2025-70103
libjxl: libjxl: Arbitrary code execution via crafted PBM images
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 27, 2026
Updated · August 10, 2026
Description
A flaw was found in libjxl, an image processing library. This heap buffer overflow vulnerability could potentially allow a remote attacker to cause a denial of service. The flaw occurs when processing specially crafted PBM (Portable Bitmap) images, primarily impacting applications that handle untrusted image content.
Statement
This Important heap buffer overflow in libjxl occurs when processing specially crafted PBM images. The vulnerability primarily impacts applications that handle untrusted image content, requiring user interaction to trigger the flaw. This is considered Important due to the potential for denial of service, even with user interaction.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
CWE-122 · Heap-based Buffer Overflow